Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft
File:                     p1cNzzcgqNWohWpLtlg_G66uAJM.mft (raw, json)
Hash identifier:          53K0mDDcloPKiSYJEHJ0uMl7Ic0dp0s6s2ivoT1Pq3Y=
Subject key identifier:   A7:F0:F0:DC:EF:80:6F:0F:47:29:EB:2B:11:FE:1C:87:C8:97:46:D2
Authority key identifier: A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93
Certificate issuer:       /CN=A91B37E3/serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093
Certificate serial:       0BC7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft
Manifest number:          0BA2
Signing time:             Sat 18 May 2024 19:18:47 +0000
Manifest this update:     Sat 18 May 2024 19:18:47 +0000
Manifest next update:     Sat 25 May 2024 19:18:47 +0000
Files and hashes:         1: p1cNzzcgqNWohWpLtlg_G66uAJM.crl (hash: 54pzZXzbES9q+PXMDcFTt7ll2lJrfKFHiA8N8a2tC7k=)
                          2: 1994900403CE11EAA10C6A84C4F9AE02.roa (hash: iRXSCwbYvkB9N1oSkDNNM/sHFlWbk+W21qXorY3ggOs=)
                          3: 4F6721CEB84B11EAB6247B7AC4F9AE02.roa (hash: v5rqq+1vbD4A/BqKnkMqbNhWY+ZtznzjTbOL/bdSMTs=)
                          4: 24252532B84711EA8A7F036DC4F9AE02.roa (hash: xMmvJvlGe/uvnHVdxcMoD5TOuMIT+w9ZoofsAGfEJ0o=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl
                          rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3015 (0xbc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B37E3/serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093
        Validity
            Not Before: May 18 19:18:47 2024 GMT
            Not After : May 25 19:18:47 2024 GMT
        Subject: CN=6648ff17-0ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0e:71:a6:48:88:32:50:af:98:c1:fa:a9:a3:
                    b8:3c:77:9b:fd:74:39:c4:f1:7b:f7:36:cf:d2:c7:
                    09:4c:3f:e2:71:eb:13:5b:ed:2f:4f:ab:49:d5:b9:
                    a3:0d:92:b1:6f:03:33:0d:9e:87:30:d7:7f:45:78:
                    99:0b:1d:8b:cd:4f:12:f0:5f:df:41:d2:40:d5:23:
                    f3:da:6b:3b:06:a3:3f:e0:47:db:b8:da:63:81:9f:
                    83:4d:66:f4:b2:5d:33:26:78:ed:07:04:a5:94:61:
                    ba:46:11:6e:98:81:12:a3:f5:69:6f:86:d3:22:03:
                    53:cf:3f:8a:0b:2e:27:52:4b:53:54:b5:21:8b:2e:
                    f1:b6:23:4e:52:82:ad:12:b2:b0:19:a9:84:a6:89:
                    aa:21:76:45:07:f7:1f:61:a9:96:dd:2e:b2:21:03:
                    97:28:95:54:88:bf:a6:a7:9e:bf:d7:3b:94:68:3d:
                    c0:46:ca:00:7c:aa:e1:d6:bc:d2:7e:43:63:cd:dc:
                    26:5a:d5:94:ce:6b:87:67:35:c2:2d:ec:ea:13:ec:
                    42:8d:c9:ec:13:1b:24:52:4f:c7:c4:d0:af:37:48:
                    87:1a:55:9c:86:aa:8d:a7:1f:5a:ab:f6:6f:2c:ef:
                    30:e8:6d:d9:b0:41:11:4e:d1:04:aa:07:ec:d6:31:
                    d5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F0:F0:DC:EF:80:6F:0F:47:29:EB:2B:11:FE:1C:87:C8:97:46:D2
            X509v3 Authority Key Identifier:
                keyid:A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:bd:59:0f:11:e7:85:07:df:f7:bd:a4:0b:cd:45:34:b5:1c:
         67:4e:ea:be:73:cd:cd:f8:56:e7:92:d4:81:5e:25:f9:ce:34:
         a9:82:e8:08:ad:9f:87:c5:d3:81:c9:37:2c:20:a5:c0:d6:18:
         6c:70:8e:23:f4:6c:2d:9b:4a:1d:3f:81:f8:d6:7b:0d:ad:3c:
         9f:19:d4:ec:65:28:52:0a:33:64:0d:fe:23:8f:35:8e:cc:63:
         6c:06:d9:c7:da:c7:73:73:50:e9:4d:54:a7:1d:00:18:f6:9c:
         8a:38:a5:78:c5:17:ee:5d:50:e2:23:29:44:71:63:e5:df:89:
         c7:d0:18:5e:aa:00:53:e7:11:3b:9a:4e:64:f0:16:ca:4e:cc:
         42:5c:30:2e:41:9c:1b:6a:ca:d4:ff:0f:02:1c:16:2c:48:7e:
         b7:72:f8:d2:5b:5e:91:e8:b0:0d:bd:96:9e:52:3b:c8:12:42:
         27:42:9f:d9:77:60:94:35:1a:58:8d:9a:85:89:11:2c:84:1c:
         5b:7b:2c:98:d2:5c:6c:de:4d:d0:e7:53:d4:f5:40:73:83:33:
         8e:b3:cb:72:a0:af:bf:bd:dd:2c:57:45:83:46:23:cd:20:9c:
         ea:9d:b1:e2:94:c0:11:6c:74:f0:4a:5a:ee:e9:f0:95:d6:56:
         90:3d:ee:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 20:16:06 2024 by rpki-client on console-ams.rpki-client.org